PT-2024-17986 · Github · Github Enterprise Server

Inspector-Ambitious · Published 2024-02-13 · Updated 2024-03-06 · CVE-2024-1374

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions GitHub Enterprise Server versions prior to 3.12 GitHub Enterprise Server version 3.11.5 GitHub Enterprise Server version 3.10.7 GitHub Enterprise Server version 3.9.10 GitHub Enterprise Server version 3.8.15

Description A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor role in the Management Console to gain admin SSH access to the appliance via nomad templates when configuring audit log forwarding. Exploitation of this vulnerability required access to the GitHub Enterprise Server instance and access to the Management Console with the editor role. This vulnerability was reported via the GitHub Bug Bounty program.

Recommendations For GitHub Enterprise Server versions prior to 3.12, update to version 3.12 or later to resolve the issue. For GitHub Enterprise Server version 3.11.5, no additional action is required as this version already contains the fix. For GitHub Enterprise Server version 3.10.7, no additional action is required as this version already contains the fix. For GitHub Enterprise Server version 3.9.10, no additional action is required as this version already contains the fix. For GitHub Enterprise Server version 3.8.15, no additional action is required as this version already contains the fix. As a temporary workaround, consider restricting access to the Management Console and nomad templates to minimize the risk of exploitation.

Fix

RCE

Command Injection

Weakness Enumeration

CWE-20

CWE-77

Related Identifiers

CVE-2024-1374

Affected Products

Github Enterprise Server

References · 9

• https://docs.github.com/en/enterprise-server@3.9/admin/release-notes#3.9.10 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-1374 · Security Note
• https://docs.github.com/en/enterprise-server@3.10/admin/release-notes#3.10.7 · Vendor Advisory
• https://docs.github.com/en/enterprise-server@3.8/admin/release-notes#3.8.15 · Vendor Advisory
• https://docs.github.com/en/enterprise-server@3.11/admin/release-notes#3.11.5 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-1374 · Vendor Advisory
• https://t.me/cvenotify/72841 · Telegram Post
• https://twitter.com/CVEnew/status/1757482909978738826 · Twitter Post
• https://t.me/cvenotify/73123 · Telegram Post